CVE-2023-45852
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
65Vexday Risk Score
Patch now. It exploitation observed in the wild and has a working public exploit.
ssvc Actepss 15%
from disclosure to weapon1120 days
Published on NVDOct 14
1st PoC+1120d
Observed exploitation+51d
In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands via shell metacharacters in the ipaddr params JSON data for the put method.
Affected products
n/a · n/a